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MEraOD AND APPARATUS RQR MONEY TP an5;pi7dc 

TUs mvcmkm relates to inet^ 
TT« iiivendcm is pariiculariy sui^^ 
5 limited exclusively to diis. 

Money tnmsfer services are offered by a number of orgaiasaiions. for example 
batiks, tbeMoiieygramorgaiusatiou, and tf« Western Ui^ Atransferee 
wishing to iiansfer money is able to visit a local antitorised agent and atiaqge for 
money to be made available for collection by a transferee at an«^^ 
10 bankt for example, in a dlfikientcoDnUy. 

In developing d» present invention, it has been appreciated that conventional 
techniques sofier from certain problems: 

(0 Identification of the transferee. Normally, a transferee wiU be required to 
piesemptoof of identification, for example, a pasqxin or driving licence, before bemg 
15 pemiitted to coUect the fimds. However, there are a large mm*er of countries in 
which many people do not holds passports or other oflicially recognisahte proof of 
identification. In such cases, money transfer may be limited to postal transfers. 
Western Union offers a codeword fecility by which a transferor can provide a code 
word widi die facial transfer mstrucdomL The tram^ i, required to present a 
20 natehingcodewordmsteadofpresentingproofofidentlficatian. 

(iO Security. PS«icalariy when a code word is used. ti«re is a risk of the 
transferee, or otfter parties hivolved m the money transfer process, committ^ 
ft win be appreciated that, espechdly m cenafa comnries. W and 
commonphtee. and difficult to control fiom outside the comitry. m general, die 
tiansferee. and the bank slaflf in dtt commy of d« nansferor and d« tramrferee. a^ 
have access to dte code word ami sufBdem od«r hrformation to col^ 

to complete dte transaction (since «,preof of identity is required). Such fiaud is very 
dilifeolt to detect and to prcvcnL 

m Accuracy of information. Often, information Is passed orally wft^ 
30 organisation by tetephone. TTus can l«d to inaccuracies in tbt information. 
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paiticiilaily whm unfiimiliar pionondation is involved, or if two people aie not fiilly 
conv^sant in the same language^ Vor exampfe, if a the name of the tiansfiuee is 
mis^elt, dien it may be impossible for the correct transferee to collect die fimds even 
on presematicm of proper identification. Sudi a comm<m error can cmly be conecled 
5 by the transferor complaining to die transfer oiganisadcm, when he is notified of the 
non-<teIivery by die transferee; die foil transfer details have to be taken again fiom the 
transferor to msmpt a forther transfer. 

The present invention has been devised bearing die above problems in mind. 
Broadly qpeaking» a first aspect of the invention is to provide die transferor with 

10 a secret identifier code (referred to m preferred embodiments as a par^ idendficadon 
code or PIQ whidi is sqjplied to the transferor independratly of the informatioa 
exchanged widi the transferor wh» the transferor is makmg a transfer request (for 
example, m the preferred embodiment, ibt PIC is sent to die transferor by post). Hie 
identifier code (or at least information related thereto) can be transmitted as part of the 

15 money transfer instincdons duongh the money handling authorities. The transferor is 
reqmred to transmit the secret identifier code to the transferee, and the transfeiree is, in 
turn, required to presrat tte identifier code as one of dtt conditions to be met before 
the money can be coUected by the transferee. Possession of the correct identifier by 
ttie transferee rq>resents proof that the transferee has been authorised to receive fonds 

20 by the transferor. 

As used herem the term ''money handling authority^ refers to any authority 
empowered to handle money and, where appiapnsKtc^ refers to any authority 
empowered to provicfe fonds to a transferee. Tlie term may include, but is not lunited 
to, banks, internet banks, post offices, etc. 

25 Sodi a tedmiqne can avoid the need for di» transferee to possess official proof 

of identi&ation, and can also inqirDve security. In particttlar, the local handling agents 
at the point of sate to the transferor will not have access to snffidnit uiformation to 
receive the fimds fiamfailently. 
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Preferably, tfae identifier code (PIC) is allocsdBd for at least one of the parties lo 
tbe transfer (i.e. the tiansfiror and/or tbe nansfeicc). In the preferod embodiment, 
die Identifier code (WQ for tbe transferor, and die same arfe fa 
tnnsferafiian die transferor to any transferee. Tins avoids die need for new identifier 
codes to be issued to tbe transferor for each transaction. 

Broadly spealdng, a second closely related aspect of the invention is to ge^ 
an identifier code (lefened in prcfencd enibodiments as a unique transaction code or 

iniQ. and to proWdc die transferor widj die code (to be forwarded by die transferor to 
die transferee), but provide die money handling amfaori^ mstiuctBd to h«nrfi> die 
transfer widi second code (refened In tiie piefened embodiments as a transaction 
verification code or TVQrelaiBdveiifiably to die identifier code. The second code is 
snfBdent to enable die money handling autiiority to verify dat die transferee fa 
antfiorised to receive die fends npon presentation of die compfete code by die 
transferee. Ujpwi collection of die fends, dus money handing autiiority can retu^ 
complete identifier code dirongh die banking system, as evidence diat die fends have 
been collected by die anthorised traioferee. 

Such a technique can provide security agamst a fiaudnlent "collection" of die 
transfer by die money bandUng autiiorities mstnicied to handle die transfer, smce tiie 
money handling staff will not have access to die complete identifier code to compbte 
validly die transaction by returning die full code as evidence of completion. If die 
fends are collected fiaudulendy by a person who has knowtedge only of die second 
code (i.e. die TVQ, and has dierefore had to add a guessed code to die known code, 

dus wiB be readay noticeabte when tfie inconect code fa reixived hai* fiom tiie money 
handUng audiori^. 

Preferably, tftis aspect of die innrentioa feitiier compifaes testing, at least 
selectively or on demand, die iuU identifier code hdbnnation renmied fbr each 
completed transfer agamst die origmaUy aOocaied identifier code to verify dot die 
correct transferee has collected the funds. 
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Ahfagggh the alxive Bspcds can be used indepeod^iiiy, paitkular advaiHages 
can be acliteved by using the two aspects in comlmiation* In paiticalar* dhe tpchniipie 
can then ensme that neithw the hawrfiing agents at the pobxt of sale, nor the handling 
agents at the point of ooOection* possess aU of the necessaiy mfonnaticm piopeify to 
5 complete a transfer. Only the transferor and die transfeiee possess the necessaiy cocte 
(Le* die PIC idoitifi^ code of die first aspect, and the UTC idratifier code of die 
second a^)ect) needed to ccmiplete the transfer. 

In a closely related zspecu the invention provides a method of generatuig a first 
HeadBcr cocte (UTC in the preferred raibodiments) and a second code (JVC in the 
10 prefened embodiments) related thereto, the method comprising: 

genecatmg the first code sudi that at least one character diereof rqxresents a 
fenction of one or more other charactera of the first code; 

generating a second code comprismg at least one, bat not all, of die characters 
of die fiist code, and comprismg mfonnaticm huficative of the positicm in said first code 
1 5 of said at least one character and/or of sakl one or more odier charactera. 

Preferably, die charactera of die first code are nmneric. 

Preferably, the function is a checksum (or sum) foncticm. 

Preferably, the second code con^>rises one or more ''blank* charactera 
representing missmg character or digit positions of tlie first code. 
20 Preferably, the function is based on characters in one or more predetermined 

positions in tte first code, and said information rq>resents the position in said first code 
of the result of die fiuKtion. 

hk the preferred embodimmt, the finvticu is numeric sum fenction of the first, 
four digits in the first code, and die information identifies where die result is to be 
25 found m die last four digits of the first code; a first character CW) dnotes diat die 
result is in the first one or two digits of die last fear; a second duuacter C*M*) denotes 
diat the result is ui the middle one or two digits of the last four; and a third character 
(''L*) denotes diat die resuh is in die last one or two digits of die last four. It will be 
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appiedaied that otter ind«^ 
nmnber of dmiacier positioiis aroibbte fiw ibe itsa^ 

Id a dosdy itlaled the invention jnovides a metiiod of testing 

infonnation provided by a tianrfen^ 
5 "«*^*«nsferinstnictions including 

at least one of dm parties to tile tniiurfcr. and a second tian^ 
related to a transaction identifier M)de allooued to die tn^ 

(a) comparing dm firet pany identifier code fiom die transfer insmictioiis widi a 

party identifier code provide by die transfeiBc; and 

» (b) con^aring die second transaction verification code widi a transaction 

identification code profvided by die transferee. 

Preferably, die mediod fiirdier comprises remining die transaction identification 

code to d» issuing audioriiy as evidence diat die transferee is andwrisrf 
fends. 

Preferably, die transaction verification code contains some, but not all of die 

charactera of d« transaction identification code, and die mediod comprises compM^ 
each known chancier in die transaction verification code for eqnivalency widi a 
conesponding character of die transaction identifier code. 

Preferably, die transactioo verification code includes infonnation assoeiaied 
widi die result of a fanction based on one or more ctaaractns of die transaction 
Idemification code, and die mediod comprises testing wfaedier die transaction 
Wentification code presented by die tiansferee matches die fcnction. 

In a closely lelaied aspect, die invention provides a money transfer system 
conqiriang: 

at least one remo«B input unit operabte to generate a money transfer reqnest in 
accoidanoe widi infonnation fnm a transferor; and 

Precessfag means for communicating widi each remote mnt for receiving and 
piocesamg money transfer requests received dierefiom. die piocesang means 
oompiisiDg: 
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means for piovidiiig a fiist iiteiiifier code associated with tiie transaoiQii and/or 
widi die identity of one or moie paxties to die tiansfisr; 

meam for mtpntdng first infonnatkm inchwiing die first identifier code, to be 
conunnnicatBd directly or indirectiy to die transferor independently of tie 
5 oomnnmicatiop witli tlie tmninal; and 

means for ou t puttin g second infimnation to be sqjplied direcdy or indirectiy to 
a numey handling autlK)iity as instrocticHis to effect die transfer for coUecticHi^ the 
second infonnaticm including at least a portbn of die first identifier code or infonnation 
related diereto to raable the anthority of tte transferee to be verified. 
10 Preferably, the system inchides a phualiQr of tenninals. Preferably, the 

processmg means (also lefened to herein as die server), is sd>le to conmnmicaie widi 
each tenninal at various times during a woddng chy, to control the tenninals dtocdy, 
or to upload transfer requests (aiKl any odier infoimaiion) logged by the tenninals while 
off-line 0f off-line pperation is supporte d ), 
15 In a foxlher dosdy related aq)ect, the uivention provides a money transfer 

system conqirising: 

at least one remote inpst unit operable to graerate a money transfer request in 
accordance with infonnadon from a transferor; and 

processing means for communicating with each remote unit for receiving and 
20 processing money transfer requests received therefrom, wherein: 

die terminal and/or the processing means is operable to ou^nit for 
oommunication dbecd^ or indirectly to the tnuuferor, an uientifier code allocated to 
the money transfer; and 

the processing mam is operable to ou^iut money tiansfer inslractions to be 
25 siqjplied directly or indirecdy to a mcm^ handling andiori^ as instnicticms to effect tte 
tiansfer for collection, the instmcdons includhig only a first portion of tte identifier 
code, whmby the money handlmg andmrity can verily a pordon of the idendfier code 
presented by the transferee. 
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Prtferably. the tenninal is operable to owpirt 
Preferably, tbe tenninal is operable to cominimicaiB die idadfier code to or fiom the 
piDoesting means. 

Preferably, the system comprises means for lecnving a fell identifier code 
retnnied by the money handlmg amhoriiy as evidence of completion of die transfer, and 

means for comparing the lemmed identifier code widi the originally ato 
die transaction. 

Preferably, the system comprises database means for storing die identifier code 
allocated to each transarfion. 

An embodimem of die nwention is now described. Iqr way of example only, 
widi reibrence to die accompanying drawmgs. in which: 

Hg. 1 is a schematic block diagram ilbstratmg die principles naed m 
embodiment; 

Fig. 2 is a schematic diagram qtostrating die mfonnadonnsedmHg. 1; 
Hg. 3 is a schematic diagram ilhistcating generation of a UTC and a TVC; 
Fig. 4 is a schematic blodc diagram of a remote nqmt unit; 
^ ''^•^Jsasdianaticblodcdlagramoftiiecwitralserver; 

Fig. 6 Is a flow diagram ilhistrating operation of die central server. 

Hg. 7 is a flow dogram Ohistrating operation of die secoml embodhnent of 
20 teiminal; 

Fig. 8 is a flow diagram ilhstiating fafonnation exchange l«ween die iBi^ 
and die central server during a pollhig operation; and 

Fig. 9 is a flow diagram ilbstrating operation of die server for handUng 
infonnadon from the second embodhnent of tenninal. 
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Hie principles used m dtfs embodhnent are fiist described briefly widi reference 
ioFlgs.laml2. Tlieq«emconsistsofaphindityof remote tennhals 10 located, for 
example, m shops and/or banks widdn a kxal comnmnity. The teiminals 10 
communicate widi a central processor, also refeired to hereinafler as die server 12. 
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Hie tenninals 10 may, for example, be coq)ted to tte server 12 by convoitioiial 
telq^hoiie modems which caU op the server 12 to be w In 
this embodimm, all qieradons ami cahailatioiw are perfonned by die server 12, and 
die terminal 10 acts as a dmnb slave miit, Le. as a miote input and display device* To 

5 improve security, the server 12 may call-bade the tennmal 10 at a pre-destgnaied 
telq>h(Hie raimber to ensure ttmt third parties camiot break into die server operation. 

When a new customer desires to perform a transfer, or desires to be ^logged* 
as a customer for future transfers, diis can be dsmt at any terminal 10, which calls the 
server 12 to p^form tte process under to server's control. Hie customer's d^ails 

10 fiK^nding his name and address are mputted duough ibe teiminal 10 and recorded by 
the server 12 m a cnstxmier database 12. The local agent gives the customer a swipe 
caid (not shown) which may be coded in any suitable manni^, for example, qydcally, 
mago^ically, or carry an electronic circuit In this embodunent, the sw^ card has a 
conventional magnetic sinp on which is a pre-recorded code uniquely idoitiiying the 

15 caid. The code also doubles as a unicpie identiifcation code for the custcmier (and is 
lefened to later as the CIC, for customer- or card- identificatbn code). To validate die 
card, the customer or the local 2tgsnt is required to insert the card into the terminal so 
that die pre-iecorded cocte can be read by die terminal's card reader (not shown) and 
communicated to the server 12 to be recorded in the customer database. 

20 Bther hnmediately, or at some time later* the server 12 allocates a party 

idendfication code (PIQ for die new customer. Hie PIC is needed later by a transferee 
to verify diat he has been audmrised by die transferor to receive die fonds. In dus 
embocfimmt, die PIC is graerated uang a random or pseudo random generator, and 
consists of a numeric code, for exanq>le, a four cfigit code, but an al^dianumerk or 

23 porely alphabetic code could be used mstead. Tlie PIC is prmted using a secure postal 
printer 16, and b posted direcdy to die customer 14. A significant feature is diat the 
nc is not communicated duough die terminal 10, and so die local agent has no means 
of accessing a person's PIC to ftandulendy inteicqgt transfers. 
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To peifoim a transfer, the costomer (transferor) 14 presents iiissw^ cant to be 
inseiiBd into the tenninal's caid leader. TWs initiates conunonicatioD between the 
tenninal 10 and the server 12 so that the transfer details can be iopotted to the server 
12. The transfer details include the name and at&iiess of the transferee, the amount to 
5 be transfeiied, and die name and address of die banlc or other money handling anthofjty 
at which die transferee win collect die transfened fends. The latter mfonnadon can be 
selected from a list or menu of aUowable collection anthoiities for any paiticuhr 
coontiyortowiL 

Hie sMver 12 ca te n lat es die amount leqoiied to be paid by the transfnor, which 
10 die transferor pays to the local agent Hie server 12 dm allocates a t™««> tUi 
i den tific a tio n code for die tansfo. hi die fonn of a mtye t«m«i«»f^ f^dp CtTTC). bk 
diis embodiment, the UTC is based on a pseudo-random code, which is tested to ensure 
dat it unii]iiely identifies die tiansfer (at least ibr die period hi which die transfer Is 
valid; die same code is available for i&nse alter diat period). Hie code is numeric, but 
15 ui ahemative Mnbodhneats could be alphanumeric, or purely ai^ihabetic. Hie server 12 
c ommnnicat ra die UTC to die temdnal 10, and a hard copy of die transfer details, 
mcfaidmg die UTC, is printed out by die tenumal 10 to be given to die tiansferor as a 
recent. 

It is die transferor's responsibility to send die PIC and die UTC to die transfeiee 
20 18 and to ensure that only the intended nansferce receives dkis mfinmadon. Noimally 

dus would be done by sendhig die PIC and die UTC by separate fomes (depicted as 2Qa 
and 2(Xi hi Fig. 1), for aamDte. bv seoaram team, iir ly emimiimii.atfag «^ 

and die odier by telephone or telex. The UTC and die PIC together provide die 
transferee widi all of die hifoimadon needed to validate die transaction, and collect die 
25 transferred fends. 

To effect tile transfer, die snver 12 oommiinicates a transfer reqnest 22 directly 
or indirectly (for exanq>le diroa^ a remole tennuial) to a cmqmter 24 of a dnnestic 
bank (assuming diat die ttansfer system is being ran by an nidqiendem org^Disation 
usuigdiebankasaniniBimedhuy). The transfer request 22 mchides die transfer details 
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soi^lied by the transferort and also indodes the PIC and a transaction vmfication code 
(TVC). TheTVCisielatedtotfaeyTCtoaabteveii^^ 
inesaued by the transfeiee, tmt die TVC does not hsdf COTiain saflBcfent infonnadon 
to enable die original UTC to be deduced if it b not known. Hie bank computer 22 
s piocesses die transfer reqaest and comnnmicates die transfer uifonnation 26, by 
convendonal bank transfer snvices» for exanq)le by tdex^ or by SWIFT, to die foreign 
bank 28 nraninated by the original instiixctions fiom die transferor 14. The transfer 
infonnadon 26 siq>plied to the foreign bank inchides tte PIC and the tnmcated TVC. 
In Older to collect die transferred fends, the transferee 18 visits the foreign bank 

10 28 and presents the PIC and fell UTC. The PIC provicfes evideue that die peraon has 
been authorised by the transferor to receive fimds, and the fell UTC provides die 
necessary anthorisaticm to complete the transaction. The stafif at die foreign bank 28 
are able to conqiare transferee's UTC widi the TVC with which diey have been 
sappVutd to verify that the fell UTC matdies the TVC. The foreign bank 28 thai 

15 returns the foil UTC to the dcmiestic home bank 24 as evidence that die transfer has 
been properiy completed, and that ti^ correct recipi^ has been paid. 

Such a system oflers important advantages over conventional techniqaes: 
(a) The transferee does not require any form of personal identificadon, such as a 
pas^rt, or a driving lic^ice. 

20 G>) The only panics in possession of all of the necessary infoimadon validly to 
complete a transaction are the transferor, and the transferee. Tbt agents at tiie point of 
sale (10) do not have access to die PIC« since tfab is allocated directly by the server 12, 
and is oommunicated to die transferor liy post Tte staff at the domestic home bank 24 
and at the foreign bank 28 have access to the nC, but do not have access to die fell 

25 UTC. This will obstruct any ferodutent activity by the handling anthwities or agents, 
(c) It is die re^nsibilir^ of the transferor to transmit die nC and die foU UTC to 
the transferee m a secure manner. If this hifonnation is mtncqMed and the fends are 
collected fiaudulently by a third parly, then i^idier the money handling authorities, nor 
the money transfer organisation, has to accept liabili^. 
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Fbr sobseqaeat transfeis from tbe same transfisror 14, the origmal WC is 
reused. The server 12 mainiains a database of transfeiora ami the PIC allocs 
each. New PIC'S are only allocatBd. piimed ami iwsted 
transfeior believes his nc to have been compramised. 

In gem»al, a transferor wUI only have to notify his HC to a transferee once. 
Once tbe transferee hums die MC, aU he nbeds to receive fimds is die new UTC 
associated widi each imiividnal transaction. TTiis funber reduces die chances of 
infbimation being inteicqwed between die transferor 14 and die transferee 18. 

Tbere arc numerous techniques for generating a TVC which relates verifiably to 
die UTC but does not prejudice die security of die UTC. cample, one techimpic 
is to tnincate. or bhnk, one or more digits or cbaracieis fiom die UTC, leaving a code 
whidi party matches die fuU UTC. The sccmity can be improved by vaiymg die 
mimber and/or die positions of die bhnlorf characters, so diat a peraon wiD not be 
to predict which of die characters of die code are ahready known m die TVC. 

A«)dier technique fbr generating a TVC is generate one or more checksmn 
digits or characters. TTiese can cidier be mchided m die UTC, or diey can be inctaded 
only in die TVC. The security can be hnproved by varying die munber and/or die 

positions of die characten or digits on which die checksum is based, so diat a person 
wni not be able to predict which characters represent, or contribute to, die checksum. 

In a paiticulariy preferred embodiment, die TVC Is generated by a combmation 
of die above two techniques. Referring to Fig 3, die UTC can consist of a7, 8. 9 or 

10 digit code, for example die code ilhisttaiBd to Fig. 3a. This is based on a pseodo- 
random number, but taUored such diat die sum of die first four dighs A Is lepreseoted 
somewhere to die last four digits, namely to die first one or two digits B of die bsc 
four, or die middle one or two digits C of die last four, or die last digit or digits D. In 
die ilhistrated code, die sum (i.e. 8+4+5+9=26) is represented to die middle two 
digits C of die last four. 

Fig. 3b illnstrates a first TVC which may be generated fiom die UTC. H» 
TVC inchides some of die original digits, die missing digits betog replaced by "blank* 
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chaiacteis. Tlic TVC also includes a prefix code "I^, •'M* or •L* to in^^ 
the sum is to be ibond in the Fiist, iatfae 
present exanqple, the sum is m the middle digits C of die last ibur» and diis is denoted 
ui die TVC by prefix *Nr. It wiU be q)predated diat die prefix code is ody mdnded 

5 indie TVCandnotmdieUTC. 

When die UTC is presented for verificadon^ die local bank can diecfc fiisdy 
whedier die digits in die UTC agree widi die digits already known hi die TVC, and 
secondly, whedier tte zppTGpxisd& checksum digits denoted by die TVC's prefix 
cone^xmd to the sum of the first four dighs. 

10 Hg. 3c ilfaistFaies a seccmd TVC which may be generated for the same UTC. 

The prefix code is» of course^ the same as that for Fig. 3b, but this exan^Ie ilhisfrates 
diat a pmon cannot predict which digits are known m die TVC, smce this ^ 

The above scheme represents a bahnce between securi^ and ease of veiificatfon 
at a remote bank. OdmrscheoiesinayiMs used which require computer verification^ 

15 dds could resoict the banks at whkh die transferee is able to collect die fonds. 

Referring to Rg. 4, the remote unit 10 comprises a main processor 30 to which 
are connected a display screen 32, a keyboard 34, a swipt card reader 38, a receqit 
printer 40, a customer/transaction logger 41, ami a telqihone communications modem 
44 coupled through an encrypdcMti/decrypdon unit 46 for communicating with tiie server 

20 12. The di^lay screen may, for example, be a video diq>lay unit, or it may be an 
alfdianumeric di^hy, for example, an LCD display. The di^lay is used to presmt 
mffffffiy-ff and prompts to die custmner (transferor) and/w die local agent supervising 
the remote terminal 10, in response to instrnctkms fiom the server 12. The details of 
the tnmsaction and, if the cnsttmier is a new custmner, die customer's details, are 

25 entered using the keyboard 34. 

Hie logger 41 provides a summary of hiformatkm inputted through the terminal 
10 during a working day, so that OKl-of-day infonnadon can be generated aitfl checked 
by die server 12. 
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Hie logger 41 and the CTcrypdon/decfyptfen unit 46 are iDastiaied above as 
discrete nnhs for ease of desci^ytH^ Hbwever/it wiU be a^iedaied that these onits 
may be embodied by software nmnmg on die main processor 30. 

Referring to Fig. 5, die server 12 consists generally of a central processor unit 
5 90 to which are connected a customer database 92» a transacdon database 94, a 
reference database 96, a PIC generator 98, a UTC/TVC gMerator 100, a secure postal 
printer 102, an o«iq>at syst^ 104 (for passing transfer instructions to a Hanir 
computer), an irqnit cache 106, and a telq>h6ne modem 108 connected thnni^ an 
ertf:ryption/decryption unit 110 (which is sunilar to the encrypdon/decrypdon unit 46 
10 described above for the remote temunal 10). 

The customer database 92 is a master database of all customen (transferors) 
who have used the system at any time. For each customer, the database also mchides 
foil name and address mfonnation, at least Ihnited transaction history, and the 
customer's PIC and CIC. The transactkm database 94 is a master database of die 
15 transactions. This includes all pending transactfons, and possibly ai least a iSmitgij^ 
history of completed transactions. The information in the transaction database 94 may 
be arehived ftom time to time to make more memory available for new transactions* 
The reference database 96 is a master database of the current reference information 
required for die transacticms, inchidmg, for exaiiq)ie, d^ countries to which transfto 
20 can be sent, available recipient bank details for each country, currency ftTchanp ^ niies 
and commission rales. 

Hie secure postal primer 102 is of a known type which is able to produce sealed 
envelq^es coniafaimg a prmted sheet, it bemg possible to read die sheet only by 
breaking open the sealed envelcpe. Sudi printers are used m sqiplications where it is 
25 desired to print mfonnaticm securely to send to a recipirat, while ensuring that local 
staff are unable to read the contents of die envelqie. 

Fig. 6 ilfaistrates the aptxatim of the server 12 once communicaticm has been 
established between a terminal 10 and die server 12. Step 122 detemuKS whedier die 
mfonnation feom the temunal 10 corre^nds to a new or existing customer. This is 
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zppmat if the inibnnatioii contains an existing customer identification code QC. 
Assuming as a fiist case diat die infonnation does cone^xmd to a new ciistc»ner» dien 
the piocess proceeds to step 123 at wiiidi die server 12 controls tlie tenninal to prompt 
for» and vetnnit iqmtted customer infonnation^ including the customer's foil name and 

5 address. At stq> 124 a new customer mtiy is created in tiie customer da tab a s e 92. 

From step 124, die process proceeds to sts^ 125 at which die server 12 controls 
the tenninal to prompt for a new swipe card to be introduced into the terminal's card 
reader 38. As <^Tpi«inftii hereinbefore, die swipe card carries a pre-recorded CIC, which 
is read by the terminal 10 and returned to the server 12. At stq> 126, die read CIC is 

10 lecorded hi the custCNuer database. This completes the introduction of a new customer 
atthetermmal 10. Tlie customer can then use die swipe card to mitiate a tnmsfer. 

At stqp 127» a FIC is gmerated for the new custmner by the PIC generator 98. 
As explamed previously, die PIC is used later by the recq>iait to identify himself at his 
local bank to collect die transferred fonds. A separate PIC is gmerated for each 

15 customer. In the ptcseat embodiment, die PIC is produced as a random or pseudo- 
random 4-digit number, so diat it is impossible to derive any reladonship between the 
FIC and the customer's details (which might otherwise enable PIC^s to be predicted by 
fraudulent parties). However, in other embodnnents, die PIC could be the result of a 
cfaecfcsnm or hashing fonction carried out on tte customer's name or address, so that it 

20 is possible to verify whether ffvok PIC matches given party's name. Alternatively, it 
is possible to generate a pseudo raridom PIC using an encryption algorithm which is 
virtually nnpossible to reverse or to predict, but which retams a verifiable relationshqp 
wrdi the parties names. However, in tte present embodiment, it is assumed that it may 
be difficult to arrange for verification of the PIC by die recipient's banic, and so it is 

25 preferred to udlise a ccmipletely random PIC. 

At step 128, die PIC is reconted hi die customer database. The PIC is also 
printed in a sealed envelope by die secure printer 102, and the envelq)e is addressed 
and posted to tte customer at his borne address idratified m the cu Aomer information 
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leoeived from the lemote tenninal 10 (and now stored in the cnstomer rfj^tafrasg 92 of 
the server 12). 

Ik will be appreciated tiiat steps 127 and 128 can be earned out either 
imm e diate ly aSa ommnmicaticm widi die terminal 10, or at some safaseqnent tone 
5 whendies^er 12niaybelessbaqf. 

If at stq> 122 die receh^ed information contains an existing CIC (and tteiefoie 
cont^XHids to an exi^g customer, die process proceeds to sitp 130 at whfch tltt 
customer's PIC is retrieved from die customer database. At stq> 132, die transfer is 
analysed to assess wfaedier it is a su^icions transfer which should be stopped for legal 
10 reasons. Snspidotts transfers may, for exunple, be detected as any of die foll^^ 

(9 transfers greater than a cntain allowable amount (which may vary dq)»dmg 
on the destination country); 

(iO repeated transfers which accumulate to a sum greater than an allowable 
amount over a predetermined period (the amount may vaiy dqiendmg on die 
15 desdnaticm coontiy); 

(iii) repeated transfera the firequency of which exceeds an allowable fignie 
(which may very dq>ending on the destination countiy). 

The puipose of siq> 132 is to provide at least a degree of protection to prevrat 
large scale money laundering or iitegal fonds transfer fit)m one coui^ If a 

20 su^icious transfer is detected, dira die transfer process can be aborted, or die server 
12 can prompt die terminal 10 diat proof of identification is required before die transfer 
can proceed. Details of die proof of identification (e.g. a pas^rt number) can be 
entered at tlie terminal 10 for communicatioa liack to the server 12. 

At step 134, a c h eck is performed on whedier the customer's payment has yet 
25 cleared. If cash is used to pay for the transfer, dien this stq> can be omitted. 
However, if payment has been made by cheque, then no transfer shooU be antlu>ii8ed 
until die cheque has been cleared by die customer's bant If die payment has not yet 
cleared, Am die data is re-stored (for exanqple, in At iapat cache 106 or in a separate 
pending store) to be re-processed during die next day's processing. 
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At Step 135, the UFC and die TVC for tte transfer aie provided. These coald 
eidier be generated ''live*, for exanq>le, by suitable algoritbrns, or the UTC and fbt 
TVC coaU be obtained fiom a sq^ly of pre-geoeialed codes. Snch codes co«iU be 
pie-generaled what tttc server 12 is not bosy, for ezanqile, overnight, and stored in 
5 suitable memory. 

At stq> 136, the UTC is commonicated from d» server 12 to die tenninal 10 to 
be printed by the teimiial*s printer 40. lUs provides the costomer (transferor) widi 
tlie UTC to s^ to the transferee. 

At step 137, die transfer details are issued as a transfer instnicdon to die 
10 intennediary bank. The transfer instnictimis oKhide die transfer details origmally 
mpntted by the cudomer, die PIC, and die TVC (uuAidmg die prefix code 'F*, 
or-L*). 

At step 138, die transaction details are stored in die transaction database 94 as a 
penfng transacticm, which completes die initial transaction processmg. Aldion^ not 

15 ilttmrated in die drawings, additional processmg can be provicted when the foreign 
bank returns the full UTC as evidence that d» transaction has been completed. The 
returned UTC can be conqiared to tlie UTC recorded in the transaction database to 
verify that the transacticm has been conq>leted correctiy. Aftemativeiy, this verification 
step nu^ only be ucessaiy if a transferor conqilains of non-deliveiy of funds to tlie 

20 tnmsferee, or of collection by an unautiiorised perscm. 

In Fig. S, the oiciyptbn/deciyption unit 110, die mpnt cache 106, the PIC 
generator 98, the UTC generaior 100, the TVC generator 101, and die databases 92, 94 
and 96 are ilhistrated as separate ''itons* from die server processor 90. This is merely 
to aid desci^liticm of die invention, b wiU be qipredated ditt 

25 be implemented by software qiplications rnnnmg on the p rDce s s o r . 

Although not ilhistraled in the drawings, it may also be possible for a customer 
to |riace a telqihone order to a teiqibone receptionist, who would then enter the transfer 
details using a dedicated teminaU or dhfectly on to die server 12. The UTC could be 
issued to die tel^hom transferor either by telephone, or by means of the secure postal 
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primer 1Q2. In the latter case, it is prefened tfiat Hie UTC be printed and posted 
separately from any cQomniniratioii of a n^ 
of infonnatfon being imeroqpted togetfier. 

Tbt above embodiment enq>Ioys "online* operaticm of d» tenninals 10 under 
tlie direct CQutrol of die seiver 12. All of the inibnnation piocessing is carried out by 
the server 12. Tim can enable relatively ine3q)»sive and straightforwaid tmninals to 
be used, and it can also enable updated tnfbnnation to be available immediately snq>ly 
by changing the infomiation and/or the programs on the server. 

In an alternative embodunent» it may be dearable to provide at least some of die 
terminals with a degree of autonomy, for ofiBfaie operation. Referring to Fig. 4, Ae 
teimmal 10 is similar to diat previoudy described, but mchides die foUowing units 
(shown m phantom): a UTC/TVC generator 48; a reference database 36; and a 
custmier/tcansacdon database 42. The lefermce database 36 provides reference 
inforinadon for the remote tennmaU sudi as details of die mdividual c^ 
transfers can be sent, and die individual banks in each country, tte exchange and 
ccMnmission rates for eadi coumry, and the likely transfer delay for each country (if a 
cateulation of the expected arrival date of the fends is to be provided). The reference 
database may also inchide ctetails of public holuiays m each country, and die allowable 
methods of payment by die customer (for example, cash, cheqpe, credit card, e-cash, 
mondex, etc.) and the clearance delay for each type of payment (if the raimiarinfi of 
the expected arrival date of die fends is to be provided). Hie mformation m die 
reference database can be updated periodically by die server 12, for example, at die 
start of a day, or durmg routme pollmg of die temunal 10 by die server, as desoibed 
fortlier below. 

The customer/transaction database 46 is used to store details of transfer 
reipiests, and details of any new customers, until the mformation can be *Ttoadffd to die 
server 12 for action. 

Referring to Rg. 7, before a new customer can use the ttan^r ^siem, the 
customer's detaib have to be entered mto die temunal usmg die keyboard (stq> 50). 
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Hie customer cteails indnde the costoiner^s name and address (or other contact 
details)^ sodiatthesecaiePICcanbe sentlatertotfae ciistx^^ the 
customer details are then stored m die costomM^tnmsacdon database 42 (step 52). 
Thereafier^ the costomer is issoed widi a swqie card (step 34) whidi carries a unique 
5 customer identificatibn code (CIC), as explamed previously. 

At stq> 56, tiie cnstxuner (or the local agmt) enters details of die deared 
transfer. Snch details include the name and ackbess of the recqyient (transferee), die 
amount to be transferred (m the local currency of die customer), tite medxxl of 
payment by the customer, and the destination country, name and address of the bank or 
1 0 odier money handUng agent at which the recq»ent will collect the transfened funds. 

At step 58, the processor 30 cakuhtes ami di^hiys the vafaie of the funds hi die 
recq>i»t's cnnen^, and the amount of commission charged, based on the mfimnatkm 
stmed m the reference database 36. If dedred, the processor may also calcnbte an 
ffitftmated date of arrival of die transfened funds at die destination bank, uang 
15 inibxmation in die reference database, and the following fbnnula: 

Arrival date » today's date + funds clearance delay + transfer delay + calendar 
(holiday) (felay 

20 If die customer agrees to die transaction and makes payment to the agent, then 

tins is confirmed at step 60. (If die customer declines to proceed, then the process can 
be aborted at this step.) Thereafter, at slep 61 the UTC and TVC for die transfer are 
pnyvided/generated by the UTC/TVC generalor 48. The UTC and TVC can either 
being generated *live*, or a pre-generated UTC and TVC can be retrieved. Snch 

25 UTC*s and TVC*s may eidier be genmted by tocal generators widun the tennmal, or 
they may be dowidoaded fiom die server 12 as part of die iqxhte mformation for the 
reference database. 

At step 62, the transfer details including the allocated UTC are stored in the 
custmner/transaction database 42 to await uploading to the server 12 for processing. 
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The tnnsfer details includiiig tbe UTC an also printed out (step 64) by die tenninal' s 
itceqrt printer 40 to provkte a recdpt fiv the costoi^ 

The above medKxi steps apply to a new custraner. An existing customer sinqily 
inserts his or her swqje caid into die tenninal's caid reader 38 (step 66), at 
5 die customer number is read from die card. This provides sufficient infonnadon for 
die server 12 to access die customer's details which are stored m die server 12. After 

step 66. die process proceeds direcdy to step 56 for die cnstomBr (or agent) to enter the 
details of die transfer, as described above. 

At varioas udervals (fauing die day, die tenninal 10 is polled by die server 12 by 
10 telqxfaone, to upload money^tiansfer mfotmadon and new customer fnfa mnrtinn to the 

server 12, and to receive new reference fadbnnadon from die server 12. Refenbiglo 
Rg. 8, when a telephone call is received fiom die serw 12 (step 70) die process 
proceeds to step 172 at whhdi die tenninal 10 verifies diat die cafi is fiom die proper 
server 12, for example, by means of a secret password. The termmal also renuns a 
secret password, so diat die snver 12 can verily that it is commnnkating widi the 
proper inndnal 10. It will be ajqjieciated diat all informatioii sent ami received 
dirongh die telqdione line is communicated in encrypted form, so that die mfotmadon 
cannot easily be mtercepted. At die terminal end, die infonnadon is 
encrypted/decrypted by die encrypdon/decryption unit 46 connected between die 
processor 30 and the modem 44. 

Following si^ 72, die terminal waits to rec^ ai^ new reference hifti»i«a«im. 
(stq) 74) for die reference database 36. Suchnewhifonnadoiiinaybefaidiefonnofa 
replacement "reference" file to overwrite die eadre existing contents of die refitreace 
database 36, or H may be in die fonn of update "packets* to replace only ceitafai 

infonnadon in die reference database. The new fadbnuation (If any) is dien written hdo 
the database. 

At slq> 78, die tondnal transmits die new contents of die cnstomer/ttansacdim 
database 42 to die server 12. This new hifonnation hichides detaib of arqr new 
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costCHners (indDdiiig the customer identification number for eadi new customerX ami 
details of tsansfer reqpesis entered by tlie customm* 

Step 80 determines wliedier tiie tenninal lias closed at tte end of the day and» if 
sOt the process prxeeds tt> slq> 82 at whidi aidH>f-<lay (BOD) infonnatioii is 
5 transmitted to die seiver 12. Hie EOD infonnaticm mcfaides totals iq>resendng die 
day's tnmsacticms and new customers, to provide a crosscheck that all of the tenninal's 
infoimation has been validly received by the server 12. This is subsequently cross- 
checked by the server 12. If die tenninal has nm yet closed at die end of the day, then 
the process branches past stiqp 82, to stq) 84 at which the communication is tenninated* 

10 Tte server 12 will normally poll each tenninal 10 at several difieient tunes 

dttiing tile day. During each communication sessioiit the terminal transmits only die 
new informatioii contained in die customer/transactian database 42 (i.e. die informatkm 
not previous!^ comnnmicated to the server). In this embodiment, die mformadon 
remains in the customer/transaction database 42 until after the server 12 verifies, for 

15 exampfe, by means of the EOD mformation, dut all of the mformation has been 
uploaded conectfy to the server 12. Such a technique enables all of the information to 
be uploaded to the server again if necessary, for exanqile, should any discrqnncies 
arise fiom the EOD information. However, in otlier embodhnents, the 
costcmier/transacdon database 42 could be cleared after each communication session 

20 with the server 12, if desired* 

In Fig. 4, die reiermce database 36, the customer/transaction database 42, d^ 
raciypticm/decryption unit 46 ami die UTC/TVC ^nerator 48 have been iUustiated as 
distinct ''itrais* from the processor unit 30. This presentation is merely j^tomff ^g to 
aid description of the mvration. It will be appreciated that such items nuy be 

25 implonented as q^lication software run by the processor unit Hie reference 
information and die customer/transaction information may be stored as files on 
commtional mass storage, for exanq[>le, a semioondnctor mass nmiory or a magnetic 
disc. 
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In USB. tfae server 12 polls each remote teimiiBl 10 to download updated 
reference infonnatfam to the temiinal 10. and to upload new txansler-ntpesL 
infoimation and new-cnstomer infinmation fiom die tenninal. lbs commimicatiDn 
procedure is c om plemftn f a r y to tfiat described above with refereace to Rg. 8. and so is 
not expanded fiudier here. Tlie uploaded fafoimalion is stored temporarily fa the input 
cadiB 106 untillt can be processed by die piocesdng unit 90. 

Fig. 10 ilhistrates die manner in which each -packer of infoimation fiom die 
input cache 106 is processed. Where appropriate die same reference numerals as diose 
in Rg. 6 are used to denote an eqnivalem operation step. ITie mfoimadon is firstly 
read firomdu; cache 106 at step 120 and. as before, stq) 122 determines whcdier die 
information corresponds to a new customer. Assuming as a first case diat die 

mformation does correqwnd to a new customer, dien die process proceeds to step 124 
at which a new customer enny is created fa die cnstoniCT database 92. conlafamg die 
CIC read fimn the input cadie. 

From step 124, die process proceeds lo siq> 127 at which a FIC is gmeiated for 
. die custtmier. 

At Step 128, die WC is printed m a sealed envelope by die secure primer 102, 
and dtt envelope is addressed ami posted to d» customer at his home address ide^ 
fa die customer faformadon received fitan die remote teimmal 10 (and now stored fa 
die customer database 92 of die server 12). The PIC is also stored fa die customer 
database 92. 

Step 132 rqnesents die first step for pnxajssfagdte transfer after die customer 
and recq>ient details have been stored. At step 132, die transfer is analysed to assess 
whedier it is a so^icious transfer which should be stepped for le^d reasons, as 
expl^aed in more detail hereinb^ore. 

At step 134, a check is performed on whedier tfae customer's payment has yet 
cleared. Assumfag dat die paymem has deared, die process proceeds to step 136 at 
which dte transfer details are issned as a transfer fastraction to die intermediary bank. 
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Hie transfer instntctioos inchide die transfer details originaUy ispntted by Ae cnstom^t 
die PIC, and tte TVC received fipom he tetminal 10. 

Al step 138» tbe tramactbm details aie stoitd In the tiansacticm database 94 as a 
po^ng tnuisaction* which cmiqiletes the mi^ 
5 If at 8iq> 122» the mfonnatkm conespcmds to an existing customer, the process 

proceeds to diroD^ step 142 at whidi the exisdng PIC for die customer is read fitm 
. tte customer database for re-use. Hie process then proceeds tluxmgh stq> 132 for 
procesang of die transfer details, as desnibed above. 

In die above embodiment, tte UTC and TVC are allocated to the transaction at 
10 diepoimof satetenninallO, topnmdeofflbieopmdQnof tfaetenm Ahhoogh 
in die ilhistraiBd embodfanent, the TVC is aUocated at die temdnaU diis could histead 
be aDocaled by the seiver 12, to reduce the risk that die TVC mi]^ be a(vaihd>le by 
isqppmg into die teiminal sono^iow. 

In die above qnbodfanents, die PIC is associated oidy with the transferor. In an 
15 aliemative fonn, die PIC could be associated instead widi eadi transferor/tnmsferee 
pair. Tims instead of a transfinor havmg a sfaigte nc, the transferor would have 
different PIC's fiMT his different transferees. TUs could provide additional security if 
needed, but migjht re^ure d» transferor to ranember possiirfy a large numl)er of PIC*s. 
Hie cummer database would also need to store all of die PIC's for each transferor, 
20 and be able to ictentiiy subsequent transactions between tiie same transferor and 
transferee, in Older to use the correct PIC. 

In the above embodhnods, swipe card is pre-programmed with its CIC, and tiiis 
is die only mfoimadcm reqaired to be read by die termmal. In odier embodhnents, die 
terminal might be eqnqpped whfa a card reader/writer for writing information to the 
25 card as well as readbig it fiom the canL This conU enable Tfavourite recq>ient" data to 
be stored (m die swipe caid in order to shnplify die dperadon for die transfenv. 

It will be appredated diat die invention, particubriy as illnstraied m die 
preferred embodiments, can enable ftands to be transferred m a logteal and secure, 
inanrer, which allows a recipient to receive die fends widiout havmg to have oflBdal 
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proof of ideiitity(siich as a passport). Qiity the transferor and the intended transfeiw 
have access to sofBcient infonnatum to compIeiB die transfer, and it is die transferor's 
leqmnsilnliQr to eosme dot die infeimaiiQn is sent in a secDTB mani^ 

Neidier die local lundling agent for die transferor, nor die locd liandliDg agent for de 
transferee, have direct access to sofBcient infoimadon to con^letB a valid transfer. 

While feattnes believed to be of inqwrtance have been idendfied in the 
foregoing desciqydon, and in die appended claims, die applicant ciahns protecdon for 
any novel idea, feaoire or comhinadon of feamres described herein and/or ilhistraled hi 
die drawings ineffective of whoher emphasis has been placed dteieon. 
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CLAIMS 

1. A method of fcatMning moosy transfer le^iesis in a system which inchides at 
least one input device for receiving infonnatimi directly or iuiirectly finom a ttansfeior, 

5 and processing means for communicating with the inpat device for processing mawy 
transfer requests therefrom, the method conqprismg: 

receiving at the processmg means a money transfer request fiom the iqmt 

device; 

providing widiin the processmg means a first idratifier code for the transfer 
10 ami/or for at least one of the parties to the transfer; 

sliding die first identifier code directly or hidirecdy to die transferor if die first 
idoidfier code is a new code, the s»ding operation to the transferor behig an 
indq)mdent cperalion from the communicatiM wifli tte inpat device; 

onqmtting mon^ transfer nistroctions inchidmg at least a portion of the first 
15 identifier code or information rebted thereto; and 

comomnicating the money transfer instmcticms to a money handling authority as 
instructions to effect die money transfer, whereby the authority of the transferee party 
to receive tiie fimds can be verified upoii presentation of the first identifier cocfe by die 
traiurferee party. 

20 

2. A method of operation m processing means for processing money transfer 
re^iestSt die mediod ccnnprisnig: 

receivmg at the processing means information representing a money transfer 
request; 

25 providing widiin the processing means a first identifier code associated widi the 

transfer and/or widi at least one or the partfes to the transfer; 

sending the first idntifier code directly or indirecdy to the tran^ror if die first 
identifier code is a new code; 
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ouifiuUiikg money tnm^r instractioiis inchiding at least a poithm of die first 

iden ti fier code or infoimatioii related dtereto; and 

communiraling die money transfer instnicdons to a money handling andiori^ as 
instrncdons to effect die money transfer, whereby die andioriQr of the transferee party 
to receive die fimds can be verified upon presenladon of die first idendfier code by die 
transferee party. 

3* A mediod of conmnmicating inibnnation widi a transferor for a iminey transfer 
operation to transfer money to a transferee, tte method conqmsbg: 

(a) receiving transfer instruction information directly or inditecdy fiom die 
transferor; 

(b) providing a first identifier code associated with die transfer and/or widi 
at least one of die parties to die transfer, die code being required by die transferee to 
complete the money transfer c^ration; 

(c) ontpntting or selectively oatputting die first idendfier code for 
commonication to the transferor; 

wherem in step (c) die first identifier code is oo^tted for confidential 
communication to the transferor indq)aidentiy of the commimicaticm in step (a), 

4. A method accordiog to claim 3. wherein stq> (c) comprises selectively 
ou^tting die first identifier code if die code is newly allocaied. 

5. A mediod accordmg to clahn 1. 2. 3 or 4, wherein die step of providmg die 

first idaitifier code coiiqirises selectively allocating anew identi&r orre-nsbga 
previously allocated identifier cocte. 

6. A inediod according to claim 5. wherein die party identifier code isassodaied 
with the transferor. 
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7. A mediod aoooiding to daim 6, whenrai the processing means oraqmses a 
database of tiansferois^ die database containing for each tiansfisror the or a pady 
identification code associated dieiewidL 

5 8. A metlxxl aoooiding to any preceding claim^ wherein the step of allocathig a 
new first identifier cocfe comprises generating a random or pseudo random code. 

9. A method accordmg to any preceding claim, fiirtiier conq>risnig generatmg a 
seccmd identifier code associated with tte tnmsacdon, and oaqmtting die second 
10 id»ndfier code to the transferee* and wlierein the stq> of graeraitng die money transfer 
instnicdtms at the processmg means conq^rises inctading a verification code related to 
die seocmd identifier code to liable the correct second idntificadon code to be verified 
when presnted by the transferee. 

15 10. A method according to claim 9, wherein the second identifier code is ou^tted 
to tiie transferor at die or a mnoie terminal. 

11. A method of handling mcHiey transfer requests in a syston which includes 
procesang means for processing money transfer requests, the mediod comprising: 
20 gyrating an identifier code associated with a transfer request; 

ontputthig die icfentifier code for communication to the transferor; 
outputting fiom tls processfaig means money transfer instiwtions inchidmg a 
verification code related verifiaUy to the identifier code; 

comnumicating die mon^ transfer instmctions to a money iMn rfH ft g antfaoriQr as 
25 mstroctions to effect the nmiey transfer, whereby dtt anthoriQr of the transferee parqr 
to receive the fimds can be verified at least paidy iqxm presentation of the orignial 
idMtifier code matching the inoonqilete code in tlie money transfer Instracticms. 
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12. A method accoidiiig to claim 11. wlierein the identifier code is based on a 
lanctom orpsendo laulain code. 

13. A method aoooidfa^ to dahn 11 or 12» wherefai the money transfer leqnest is 
5 geneiated at a tenninal remote fiom the processing means, and the identifier code is 

oD^mtted at the tenninal for the transferor. 

14. A mediod of operation in a processing means for processing mon^ transfer 
requests, die method conprising: 

10 receiving at die processmg means infonnation represendng a money transfer 

reqiiest; 

providiiig an nlendfi^ code; 

providing a verification code related verifiably to die ideodfier code, die 
verification code being insafiBdeat to enabk die ideodfier code to be deduced 
15. unambignoosty thmefiran; and 

uuipulUug fiom die processmg means money transfer instrncdons including the 
transaction veiificadcm code, for communlcatian to a money handling andiority as 
histracdoos to efifect die moiey ttansfer. wherd^ die audiori^ of die transferee party 
lo receive fends can be verified at least pardy upon presentation of die original 
20 idoitifier code matching die verification code in the money transfer histracticos. 

15. A mediod acconfing to claim 11. 12, 13, 14 or 15. wherein die identifier code 
is generated aich diat at least one character diereof represents a fonction of one or more 
odier charactera of the identifier code, and die stqi of providhig d» verification code 
2S ccHnprises goierating a code comprismg at least one, bat not all, of die rii««w?tm of 
die identifier code and hichidtog mfiwmation indhative of the pnririnn in «iM i«ii«itifi «y 
code of said at least one chaiacter and/or of said one or more odm charactera. 
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16. A mettod aocoidiDg to daim 15^ wheiein the characters in the identifier code 
aremuneiK:. 

17. A method according to claim 15 or 16, wherein the faiu:tion is a smn fimcticm. 

5 

18. A mediod according to daim IS, 16 or 17, wherein the verificatim code 
conqnises one or more blank characters rq>resenting missing character or cttgit 
portions of the identifier code. 

10 19. A mediod according to claim 15, 16 or 17, wherein the function is teised on 
charactm in one or more predetennined poations m the id^ilifier code, and said 
mformatiim rqnesents the position in said identification code of die resnlt of die 
function. 

15 20. A method according to any preceding claim, further conqprising storing die or 
eadi identifier code at the prooessmg means. 

21. A mcmey transfer system conq)rising: 

at least cme iiqnit unit operable to generate a money transfer ropiest in 
20 accordance widi infonnation fiom a transferor; and 

imxressing means for communicating with tiie or each iiqnit unit for receiving 
and processing mcMiey transfer re^iests dierefirom, die processing means comprismg: 

means for providhig a fist identifier code for die transaction and/or for die one 
or more parties to tlie transfer; 
23 means operable to cm^mt first infoimatkm mdndhig die first identifier code, to 

be commuiucated direcdy or indirect^ to die transfaor indqiendently of the 
communication operaticm with the iiqiut unit; and 

means for ontputting money transfer instrmtions mchidhig at least a portion of 
the first idtttifier code or information related diereto, for communication to a mcmey 
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handling autfaori^ as mstrucdons to effect the money transfix* wittieby the authority of 
a transferee party to receive the fimds can be verified at least partly by presentation of 
tlie first identifier code by tlie transferee party. 

5 72. A systan accorduig to claim 21. conyrismg at least one remote inpnt imif. 

23. A processfaig systun foruse in a mcmey transfer sy^em for procesang nraney 
transfer reqoesls, tibe processing system comprising: 

means for receiving information rqiresenting a money transfer request; 
10 means for providmg a fist identifier code associated widi the transaction and/or 

with one or more parties to die transfer; 

means operable to output first information inchidmg the first identifier code» to 
be communicated direcdy or indirecdy to the transferor; 

means for ou^mttrng money transfer instructions inchiding at least a portion of 
15 die first identifier code or information related tfiereto, for ccnmmmication to a money 
handlmg authority as instractions to effect die money transfer^ wherdiy die authori^ of 
a transferee party to receive die fends can be verified at least partly by presentation of 
the first identifier code by the transferee party . 

20 24. A system for communicating uiformation with a transferor for a money transfer 
operation to transfer money to a transferee, tlie system ccunprising: 

means for receiving transfo faistruction information dSrectly or imlirectly bom 
the transferor; 

means for providing a first identifier code associated widi die transfer and/or 
25 widi at least one of die parties to die trauder, die code being reqnued by the transfeiee 
to oonq>lete the money transfer operation; and 

means ibr outputting the first identifier code for confidential cnmmtnir^t^ to 
the transferor. 
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25. A system aoconfing to claim 24, wteiein tte means for ou^utthig infonnatum 
for the tiansferor con^rises means for selectively ouqmtting the first idendfier code if 
the code Is newly allocated. 

5 26. A sysmn according to daim 21» 22^ 23, 24 or 2S» whndn the means for 
prnviding die first identifier code con^rises means for selectively allocating a new 
identifier code, or re-iisingapieiviously alkicatedidratifieroode. 

27. A system accoiding to claim 26, wherein the first identifier code comprises a 
10 party identification code associated with the transferor. 

28. A system according to chum 27, wherein the processfaig means comprises a 
database of transfinors, the database coniaimng for each transferor die or a party 
identificarion code allocated thereto. 

15 

29. A systm acconfing to any of clahns 21 to 28, whmm die means far aiiftratinfl 
a new first idntifier code ctHnprises ineans for generatmg a code based (m a ra^^ 
psendo randcm code. 

20 30. A system according to any of claims 21 to 31, fiutlier comprising means for 
generating a second identifier code associated with the transacdon, and ooqmtting die 
second identifier code to die transferor, and wherein the means for graeratmg the 
money transfer instructions at the processing means comprises means for ii^faiding a 
verification code related to die second Klentifier code to enable die correct idendfi^ 

25 co(fe to be verified when presented by a transferee. 

31. A ^stem aoconfing to chdm 32^ wherem the second identifier code is ou^pntted 
to die transferor at the or a ranote terminal. 
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32. A sy^em for handling money tran^r icqoesis, CQmpiisiQg: 

at least one input device for lec^ving tnmsfer request mfonnation diiecdy or 
indirecdy finran a transferor, 

means for allocating an identifier code amriftt^ with die transfer mpiest; 

means for outputting die idendfier code for die transferor, die code being 
required by a transferee to complete a valid money transfer; ami 

means for providing a verification code related to die idotifier code, the 
verificadon code being insufiEident to enable tte Idendfier code to be <fe(faced 
dierefinom unamtngooosly, 

means for outputtmg money transfer mstrocdons hH:faidmg die verification code 
for c ommunicat ion to a money handlmg audiority, as mstracthms to effect the mon^ 
transfer, whereby the amhority of a transferee paity to receive die fends can be ve 
at least paidy upon presentation of die origfaial idendfier code matchmg die verificadon 
code in the moi^ transfer instracdons. 

33. A system according to chdm 32, wherem the identifier code is gei^rated as, or 
is based on, a random or pseudo random code. 

34. A system according to claim 32 or 33, wherein die uqmt device is a ranote 
terminal. 

35. A processuig sysimn for processmg money transfer re^iests, the ^stm 
conqirismg: 

means for receiving mfonnadcm rcpresentiiig a money transfer re^iest; 

means for allocating a transaction identi&r code for ccmnmmication directly or 
indirecdy to a transferor; 

means for providmg a verification code related to the tiansactioii identifier code, 
die verification code bemg insnflicient to enable die identifier code to be deduced 
unambiguously therefrom; 
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means for on^pottmg money transfer tnstnicdons incfaidmg die verification code^ 
for cnrnmnnication to a money handling andiority as instiuctions to e£fect tbe money 
transfer^ wheidiyAeautlioiity of the oansfeiee party 

at least paitfyiqxm presentation of die original idatifier code matching the incomplete 
5 . code in tlie mon^ tcansfer instroctions* . 

36. A tmnimd for receiving money transfer requests, and for conmnmicating 
transfer reipest faifonnation to a central processor, die terminal comprising: 

inpat means for receiving informadcm regarding the transfer and die parties to 
10 tte transfer; 

means operable to allocate and/or to receive a transaction identifier code; 
means for ou t puttin g the transaction identifier code for communication to tl^ 
transferor; 

means for storing infonnation relathig to die requested money transfer, said 
15 infonnation inchiding the allocated id^itifier code; and 

means for communicating witii a said central processor. 

37. A tmnmal accordmg to chum 36, wherein tte iiqiut device comprises a card 
reader for reading information on a card presented diereto. 

20 

38. A terminal according to claim 37, wherein the card reader comprises a magnetic 
card reader. 

39. A method of handling a money transfer request, comprising: 

25 receivuig transfer request mformationdumly or indirecdyfeom a transfer^^ 

alloeating a transaction identification code for the tcansfer recpiest; 
providing a paity identifier code associated with one or mroe parties to die 
transaction; 
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CQnmnmicating at least the tmnsactKm identifier code to die transferor, to be 
fiuwarded by tlie transferor to die trausfoee; 

commmiicating money transfer instnictions to a money handling aodioiiiy to 
effea die transfer, die money transfer mstnicdons hichidhig inibnutt^ 
tnnsartion identifier code and mfomiation relating to die party identifier bat at 
least one of die codes being incomplete soch diat die money transfer instnictions do not 
contain sufficient infonnatitm to complete a valid tiansfer; 

whereby die andiority of a transferee to receive die funds can be verified by die 
money handling audionty upon presentation by die transferee of die original *»n«r«i«^ 
identifier code and die original paiQr identification code, whidi match die infeimmiffn 
hi the money transfer mstnictions. 

40. A mediod according to daim 39, wberem die step of communicating 
mfonnation to die transfenv conynises selectively communicating die party i/fenrtfef 
code. 

41. A mediod aoconfing to chim 40, wherein die step of communicating 
infonnation to die tran^ror comprises communicating die paity idatifier ctidt if die 
paiqr identifier code is newly allocated. 

42. A mediod according to clahn 40 or 41* wherein die sttsp of communicating 
hifonnation to d» transferor cpmprisea not comm miieating the piny UbmOfi ffr gmfc tf a 
party id e ntific a tio n code has previonsly been allocated for an eariier transaction 
between die same parties, and Is to be re-osed for the cunent transaction. 

43. A mediod accordfaig to any of dahns 47 to 49, wherehi die party {ri*>n«MWi«f« 
code, if c ommunicat e d to die uansferor, is communicated hidqiendentiy of the 
transaction identifier code. 
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44. A m^hod of testmg mfoimatkm pioviifed by a transfeiee for coUectiQii of 
fiuidSy dse intdiod ooiqnrisiiig: 

iQoeiviiig tEsmsfer insinictibns inchiding a fim paity identifier code allocaled to 
at least one of the paxtfes lo ite transfer, and a seocmd transaction verificalioii code 
5 related to a transaction identifier code allocated to the transaction; 

(a) comparing the first pai^ idmdfier code fiom die transit instracdcms with a 
party ictenttfier code provided by tbe transferee; and 

(b) comparing d» second transaction verification code with a transaction 
idmtification code provided by the transferee* 

10 

45. A meduxl accordmg to clabn 44, fimfaer conq>rising retnming die transaction 
identification code to the issnmg antiiority as evidence diat tiie transferee is andiorised 
to rective the fimds. 

15 46. A mediod according to dalm 44 or 45, wherdn die transaction verificaticmc^ 
contahis some, but not all of die diaractera of the transaction idmti&ation code, and 
die m^faod comprises comparing each known character in die transaction verification 
code for equivalency widi a oone^nding character of die transaction identifier code. 

20 47. A method according to claim 44, 45 or 46, wherein the transaction verification 
code includes infonnation associated with tlie result of a fonction based on one or more 
characters of the transaction identification code, and the method CKmpnsts testing 
whether the transactton identification code presemed by tte transferee matches the 
fonction. 

25 

48. A method or qqnrams for handling money transfer requests, being sohscmtially 
as hendnbefore described with reference to any of die ^ccmipanying drawings. 
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